CVE-2022-25018

Pluxml v5.8.7 was discovered to allow attackers to execute arbitrary code via crafted PHP code inserted into static pages...

CVE-2022-25018

Affected software: Pluxml v5.8.7. Vulnerability: remote code execution via crafted PHP code inserted into static pages. Root cause: improper handling/insertion of PHP in static content enables arbitrary code execution by an attacker. Impact: attacker could run arbitrary PHP on the server; CVSS co...